Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          foCdtWrcAw+BZsYhxDqXWQHZQeF/VsoT+ec6+HjDEdo=
Subject key identifier:   84:DE:E8:89:DC:C1:C1:51:51:05:AB:93:C1:70:17:9A:F3:96:99:32
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       01962E2ADF0C0C812FE2F93089101901023A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          0845
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: hGEINuK9dOXufCvYUfj1AMhldHkKVHanJXkrsgWYvGM=)
                          2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:0c:0c:81:2f:e2:f9:30:89:10:19:01:02:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=84dee889dcc1c1515105ab93c170179af3969932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:5e:b2:38:63:86:36:59:3f:3c:5d:7a:0c:
                    01:d5:1d:58:1c:1f:6e:8c:91:f6:8a:5d:c8:6b:41:
                    d4:a6:b0:ff:b8:2e:93:70:dc:fb:29:29:fc:0a:22:
                    10:97:ed:f3:cb:61:60:24:d8:ce:74:9f:c0:6f:ce:
                    e5:c1:b6:0f:1b:96:20:cd:0f:0b:54:8e:f8:ab:09:
                    13:ed:a5:1e:79:f5:e4:57:93:8c:7d:ac:9e:d7:1e:
                    d8:56:57:2e:54:f9:65:80:39:8d:b3:e5:31:c1:c1:
                    a5:57:e0:1a:49:ca:d7:e6:b8:70:70:f5:27:e3:0b:
                    e5:da:0b:06:5c:0f:f3:a6:64:2c:d1:84:b4:19:e8:
                    4d:fe:ed:13:8b:13:4f:dc:01:94:35:ff:1d:c5:f9:
                    0d:74:d2:24:4a:84:1f:e7:f8:79:f3:9b:a1:c8:1e:
                    bf:e4:6b:e3:ae:44:71:65:a5:5a:da:60:4c:12:60:
                    fe:65:12:cc:dd:57:fa:70:0b:6c:90:7f:fa:49:47:
                    7f:a2:24:03:94:9b:16:c0:82:93:39:95:69:70:89:
                    bd:17:89:a3:83:ce:ef:35:fa:7a:c2:34:c5:1e:26:
                    f1:3c:72:02:98:dd:f4:5f:49:09:fa:d2:cf:fa:35:
                    04:91:af:1c:21:bf:1e:d1:ad:a9:27:ea:4d:59:79:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DE:E8:89:DC:C1:C1:51:51:05:AB:93:C1:70:17:9A:F3:96:99:32
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:fc:34:57:37:27:5e:7f:58:7a:42:44:27:15:a8:32:11:
         b8:90:da:f1:2e:45:0a:79:67:cc:c1:78:68:0c:78:cf:40:9b:
         a2:c6:0d:7a:5d:77:d0:ba:91:9d:2a:f4:6e:83:90:47:d6:f2:
         9f:d2:b1:79:54:b2:77:3c:ba:a8:a7:15:64:37:41:1e:05:87:
         53:74:70:0e:c4:2f:47:1c:e5:23:85:1e:6e:13:43:f4:48:91:
         27:60:6d:3b:2d:70:be:20:ba:b0:66:e0:cf:5a:10:d2:a0:76:
         e8:1e:0d:3f:29:d2:f8:28:c8:1d:06:ca:bb:7f:d9:fa:18:03:
         4f:f5:87:43:b9:77:1d:a4:41:a5:30:40:68:df:2b:0e:b9:e9:
         09:9f:1d:23:ec:53:af:bf:a1:98:24:df:73:42:be:92:87:fb:
         27:b3:d2:15:4e:b6:4c:87:4f:f9:2f:10:b9:5d:99:65:8a:1c:
         75:18:ef:ab:dd:62:e9:ca:cc:33:25:cd:c3:b0:98:5c:58:c9:
         b4:98:31:fb:36:7b:6e:3a:3a:2a:b7:9e:9e:1c:46:1f:5b:6e:
         47:3d:be:e9:49:ec:69:f7:fc:b3:19:38:89:1e:53:21:bd:3e:
         79:25:b8:1a:69:59:09:44:65:6a:87:94:cc:0b:10:37:f5:3d:
         e6:6b:6c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKt8MDIEv4vkwiRAZAQI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj
ZjJkYmMwHhcNMjUwNDEzMDgwMTIzWhcNMjUwNDE0MDgwMTIzWjAzMTEwLwYDVQQD
Eyg4NGRlZTg4OWRjYzFjMTUxNTEwNWFiOTNjMTcwMTc5YWYzOTY5OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY9esjhjhjZZPzxdegwB1R1YHB9u
jJH2il3Ia0HUprD/uC6TcNz7KSn8CiIQl+3zy2FgJNjOdJ/Ab87lwbYPG5YgzQ8L
VI74qwkT7aUeefXkV5OMfaye1x7YVlcuVPllgDmNs+UxwcGlV+AaScrX5rhwcPUn
4wvl2gsGXA/zpmQs0YS0GehN/u0TixNP3AGUNf8dxfkNdNIkSoQf5/h585uhyB6/
5GvjrkRxZaVa2mBMEmD+ZRLM3Vf6cAtskH/6SUd/oiQDlJsWwIKTOZVpcIm9F4mj
g87vNfp6wjTFHibxPHICmN30X0kJ+tLP+jUEka8cIb8e0a2pJ+pNWXmt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITe6IncwcFRUQWrk8FwF5rzlpkyMB8GA1UdIwQY
MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt
MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy
LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+b8NFc3
J15/WHpCRCcVqDIRuJDa8S5FCnlnzMF4aAx4z0CbosYNel130LqRnSr0boOQR9by
n9KxeVSydzy6qKcVZDdBHgWHU3RwDsQvRxzlI4UebhND9EiRJ2BtOy1wviC6sGbg
z1oQ0qB26B4NPynS+CjIHQbKu3/Z+hgDT/WHQ7l3HaRBpTBAaN8rDrnpCZ8dI+xT
r7+hmCTfc0K+kof7J7PSFU62TIdP+S8QuV2ZZYocdRjvq91i6crMMyXNw7CYXFjJ
tJgx+zZ7bjo6KreenhxGH1tuRz2+6Unsaff8sxk4iR5TIb0+eSW4GmlZCURlaoeU
zAsQN/U95mtsiQ==
-----END CERTIFICATE-----